From 7dd4860735226a9f3edc7a215470d6643d761e66 Mon Sep 17 00:00:00 2001 From: Inex Code Date: Mon, 1 Jul 2024 19:14:28 +0400 Subject: [PATCH] fix: CVE CVE-2024-6387 workaround --- configuration.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/configuration.nix b/configuration.nix index ae14c36..f62669c 100644 --- a/configuration.nix +++ b/configuration.nix @@ -74,8 +74,10 @@ in settings = { PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication; PermitRootLogin = "yes"; + LoginGraceTime = 0; }; openFirewall = false; + }; programs.ssh = { pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];